PyPI/ocrodjvu CVE-2010-4338: unknown, EPSS 0.32%
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
Action: Upgrade ocrodjvu to 0.4.6-2 or later.
pip install ocrodjvu==0.4.6-2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.6-1 | 0.4.6-2 | - |
Fixed versions
| 0.4.6-2 |
Sources
- osv: PYSEC-2026-886
- https://nvd.nist.gov/vuln/detail/CVE-2010-4338
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64892
- https://github.com/jwilk-archive/ocrodjvu
- https://web.archive.org/web/20200229160520/http://www.securityfocus.com/bid/45234
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598134
- https://pypi.org/project/ocrodjvu
- https://github.com/advisories/GHSA-5pjj-7m4p-wfh2
CVE-2010-4338 · published · modified · JSON